WebAssembly Wabt Out-of-Bounds Read Vulnerability in Wasm-Decompile Component

A vulnerability allowing out-of-bounds read has been identified in WebAssembly Wabt versions through 1.0.39. This issue arises in the wasm-decompile tool, specifically within the function wabt::Decompiler::VarName. The vulnerability leads to a segmentation fault by accessing memory at an invalid address, which can be exploited locally. The problem was reproduced in a release build with AddressSanitizer enabled, indicating a potential wild pointer dereference when the decompiler processes variable names in a malformed WebAssembly binary.

Impact

Exploitation of this vulnerability causes a segmentation fault, leading to a crash of the wasm-decompile tool.

Reproduction

The vulnerability can be reproduced by compiling Wabt with Clang in release mode, with AddressSanitizer enabled. After compiling, the wasm-decompile tool can be run with a crafted WebAssembly binary that triggers the out-of-bounds read, causing a segmentation fault.